Dailydave mailing list archives

Re: News, dumbug, prediction rebuttals.


From: Blue Boar <BlueBoar () thievco com>
Date: Thu, 22 Dec 2005 12:23:42 -0800

Dave Aitel wrote:
IMO, intense auditing is really just a warm up. OpenSSH is the most
intensely audited code on the planet and it still has problems that
require them to change their architecture to avoid exposing too much
code to the pre-auth world.

Is it really "require", or are they simply doing more paranoid things, which have served them well in the past?

OpenSSL and zlib should really be the most intensely audited code, they get linked into just about everything.

                                                BB


Current thread: